Skip to content

chore(deps): bump the github-actions group across 1 directory with 7 updates#92

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/github-actions-613e7f4689
Open

chore(deps): bump the github-actions group across 1 directory with 7 updates#92
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/github-actions-613e7f4689

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 7 updates in the / directory:

Package From To
actions/checkout 4 6
actions/setup-python 5 6
hashicorp/setup-terraform 3 4
docker/setup-buildx-action 3 4
docker/bake-action 6 7
softprops/action-gh-release 2 3
appleboy/ssh-action 1.0.3 1.2.5

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

... (truncated)

Commits
  • df4cb1c Update changelog for v6.0.3 (#2446)
  • 1cce339 Fix checkout init for SHA-256 repositories (#2439)
  • 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
  • 0c366fd Update changelog (#2357)
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • 1af3b93 update readme/changelog for v6 (#2311)
  • Additional commits viewable in compare view

Updates actions/setup-python from 5 to 6

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v6.0.0

v5.6.0

What's Changed

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

What's Changed

Enhancements:

Bug fixes:

... (truncated)

Commits
  • a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
  • bfe8cc5 Upgrade @​actions dependencies to Node 24 compatible versions (#1259)
  • 4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
  • 83679a8 Bump @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...
  • bfc4944 Bump prettier from 3.5.3 to 3.6.2 (#1234)
  • 97aeb3e Bump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)
  • 443da59 Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...
  • cfd55ca graalpy: add graalpy early-access and windows builds (#880)
  • bba65e5 Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)
  • 18566f8 Improve wording and "fix example" (remove 3.13) on testing against pre-releas...
  • Additional commits viewable in compare view

Updates hashicorp/setup-terraform from 3 to 4

Release notes

Sourced from hashicorp/setup-terraform's releases.

v4.0.0

BREAKING CHANGES:

  • Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

v3.1.2

NOTES:

  • This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

v3.1.1

BUG FIXES:

  • wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

v3.1.0

ENHANCEMENTS:

  • Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)
Changelog

Sourced from hashicorp/setup-terraform's changelog.

4.0.0 (2026-02-24)

BREAKING CHANGES:

  • Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

3.1.2 (2024-08-19)

NOTES:

  • This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

3.1.1 (2024-05-07)

BUG FIXES:

  • wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)
Commits
  • dfe3c3f Update package version
  • 61e02cf Update changelog
  • 36079f9 fix: update @​hashicorp/js-releases to v1.7.7 to resolve Node 24 DEP0169 warni...
  • af2ccf2 update axios brace expansion flatted picomatch (#551)
  • 5b1ab0e Bump follow-redirects from 1.15.11 to 1.16.0 (#542)
  • ca190bf Bump miniscruff/changie-action in the github-actions group (#541)
  • 30128a2 chore: update CI node version from 20 to 24 (#544)
  • b0cc02d Bump undici from 6.23.0 to 6.24.1 (#539)
  • 3d7cd03 Update README.md with latest versions (#536)
  • fa68287 Bump actions/setup-node from 6.2.0 to 6.3.0 in the github-actions group (#537)
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3 to 4

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

... (truncated)

Commits
  • d7f5e7f Merge pull request #489 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 92bc5c9 chore: update generated content
  • da11e35 build(deps): bump @​docker/actions-toolkit from 0.79.0 to 0.90.0
  • f021e16 Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.24.1
  • b5af94f chore: update generated content
  • 16ad977 build(deps): bump undici from 6.23.0 to 6.25.0
  • d7a12d7 Merge pull request #495 from docker/dependabot/npm_and_yarn/glob-10.5.0
  • 28ff27d build(deps): bump glob from 10.3.12 to 13.0.6
  • daf436b Merge pull request #496 from docker/dependabot/npm_and_yarn/fast-xml-parser-5...
  • 9725348 chore: update generated content
  • Additional commits viewable in compare view

Updates docker/bake-action from 6 to 7

Release notes

Sourced from docker/bake-action's releases.

v7.0.0

Full Changelog: docker/bake-action@v6.10.0...v7.0.0

v6.10.0

Full Changelog: docker/bake-action@v6.9.0...v6.10.0

v6.9.0

[!IMPORTANT] docker/bake-action/subaction/list-targets is deprecated and will be removed in a future release. Please use docker/bake-action/subaction/matrix instead.

Full Changelog: docker/bake-action@v6.8.0...v6.9.0

v6.8.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/bake-action@v6.7.0...v6.8.0

v6.7.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

... (truncated)

Commits
  • 6614cfa Merge pull request #425 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0a925a2 chore: update generated content
  • b9ca742 chore(deps): Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0
  • 48e6359 Merge pull request #429 from docker/dependabot/npm_and_yarn/fast-xml-parser-5...
  • d1523f4 chore: update generated content
  • a73f293 chore(deps): Bump fast-xml-parser from 5.5.9 to 5.8.0
  • bc584ac Merge pull request #430 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 23050a1 chore: update generated content
  • 7ae1cf6 chore(deps): Bump @​actions/core from 3.0.0 to 3.0.1
  • e7934f8 Merge pull request #432 from docker/dependabot/npm_and_yarn/postcss-8.5.10
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 2 to 3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

v2.6.2

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.6.2

v2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

v2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

... (truncated)

Changelog

Sourced from softprops/action-gh-release's changelog.

0.1.13

  • fix issue with multiple runs concatenating release bodies #145
Commits

Updates appleboy/ssh-action from 1.0.3 to 1.2.5

Release notes

Sourced from appleboy/ssh-action's releases.

v1.2.5

Changelog

Refactor

  • 0ff4204d59e8e51228ff73bce53f80d53301dee2: refactor: streamline output handling for GITHUB_OUTPUT in workflows (#404) (@​appleboy)

Documentation updates

  • 23bd972bfcf52bf00cbb7f7f62b2bb06c2efa5b4: docs: update README and assets for new SSH agent workflow (@​appleboy)
  • 8e460a28f2d26993d9be77c5fc1442e9d6ba2e7f: docs: improve documentation table formatting for output descriptions (@​appleboy)

v1.2.4

Changelog

Enhancements

  • 4e3535e14ec03f79243a1a56045526c18d66d556: chore: bump default DRONE_SSH_VERSION to 1.8.2 (@​appleboy)

Build process updates

  • 823bd89e131d8d508129f9443cad5855e9ba96f0: ci: trigger GitHub Actions workflows only on version tags (@​appleboy)

Documentation updates

  • 652a0bee3c6aaba4fb2ae596f1de42c51f8e81ec: docs: update CI documentation and workflow references (@​appleboy)
  • f6208e096db23f5766ae2e218bde93cb6a8d0944: docs: document and demonstrate capturing and using command output (@​appleboy)

v1.2.3

Changelog

Features

  • 20d5c5bbc91841863c09aaa3a6797061bbf148a4: feat: add configurable curl insecure flag to GitHub action (@​appleboy)

Bug fixes

  • 170eebb2ee3ce82216b41e857a289e0dca842c08: fix: enhance binary download flow with robust error handling (#394) (@​appleboy)

Enhancements

  • b27b9f8968f508f19656348e47e978c4686dbd2f: chore: refactor system to improve efficiency and update API usage (@​appleboy)
  • 0e19dd962da42eb2f2b775d6e133dc9dfd424aa6: chore: improve robustness and consistency across multiple scripts (@​appleboy)

Refactor

  • b6690ee817812c18c1bcc05cd08d0011e6aabc63: refactor: improve error handling and code readability across scripts (#374) (@​appleboy)

Build process updates

  • 2b3c6504b3e1405c32b38787b6d20b223a1ecebc: ci: unify and enhance GitHub workflow configurations (@​appleboy)
  • ffd1eec36471c1bfbebcf1941411db862c9b0e38: ci: add workflow step for multi-command SSH testing (#386) (@​appleboy)
  • 53f5c5cedfd3f9032989483701c0a25764f2d4e3: ci: add automated Trivy security scanning via GitHub Actions (@​appleboy)

Documentation updates

  • 52a1840ca6cafe7e0e1e15e8649b935ba4e33077: docs: update SSH action version to v1 in all README files (#372) (@​appleboy)
  • 689de3cf649b7be1e792eeea9fc0571dcc0c3e4f: docs: improve CLI messaging and error clarity for users (@​appleboy)
  • 9ca1cd21746f53919166547633817ce20c8b5394: docs: document the new curl_insecure configuration option (@​appleboy)
  • bd83ba7e2b3b59ec4007ddc30c72ef12e5d2fff7: docs: document and configure drone-ssh version usage (#381) (@​appleboy)
  • b80f638dc49d3b3a0321d26532f97c8eecb7276b: docs: rewrite and unify documentation across all supported languages (@​appleboy)
  • c7fbbc9208e4020c3b78e5db9e7042248c991866: docs: add table of contents to multilingual README files (@​appleboy)
  • 4d84f0522a5d50416e14452c3285361e7fdff665: docs: revamp and unify multi-language readme documentation (@​appleboy)
  • 8f3cc07719a6ef0a247c6a0b146041bf14ea6211: docs: add comprehensive tables of contents to all README files (@​appleboy)
  • 8745f9583c033551b991c73d76d23dd610c9f26e: docs: restructure and clarify parameter documentation across all readmes (@​appleboy)
  • 57f6f3556d4a3e900b37a8dcf9e06ec7da87d6e7: docs(readme): better wording for script_path property (#387) (@​kontur)
  • 3ca8a7c5359ac6ad91aa47f1946ece1c3b025004: docs: clarify script_path usage in Chinese remote execution docs (@​appleboy)
  • c680069d84038812d68d6f1360d230ea50fb6005: docs: add comprehensive documentation for project setup and usage (@​appleboy)
  • 91f3272fc5907f4699dcf59761eb622a07342f5a: docs: add Trivy security scan badge to all documentation (@​appleboy)

v1.2.2

Changelog

... (truncated)

Commits
  • 0ff4204 refactor: streamline output handling for GITHUB_OUTPUT in workflows (#404)
  • 8e460a2 docs: improve documentation table formatting for output descriptions
  • 23bd972 docs: update README and assets for new SSH agent workflow
  • 823bd89 ci: trigger GitHub Actions workflows only on version tags
  • f6208e0 docs: document and demonstrate capturing and using command output
  • 652a0be docs: update CI documentation and workflow references
  • 4e3535e chore: bump default DRONE_SSH_VERSION to 1.8.2
  • 91f3272 docs: add Trivy security scan badge to all documentation
  • 53f5c5c ci: add automated Trivy security scanning via GitHub Actions
  • 170eebb fix: enhance binary download flow with robust error handling (#394)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 3, 2026
…updates

Bumps the github-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `3` | `4` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [docker/bake-action](https://github.com/docker/bake-action) | `6` | `7` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2` | `3` |
| [appleboy/ssh-action](https://github.com/appleboy/ssh-action) | `1.0.3` | `1.2.5` |



Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

Updates `hashicorp/setup-terraform` from 3 to 4
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](hashicorp/setup-terraform@v3...v4)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3...v4)

Updates `docker/bake-action` from 6 to 7
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](docker/bake-action@v6...v7)

Updates `softprops/action-gh-release` from 2 to 3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

Updates `appleboy/ssh-action` from 1.0.3 to 1.2.5
- [Release notes](https://github.com/appleboy/ssh-action/releases)
- [Commits](appleboy/ssh-action@v1.0.3...v1.2.5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: appleboy/ssh-action
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/bake-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: hashicorp/setup-terraform
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the github-actions group with 7 updates chore(deps): bump the github-actions group across 1 directory with 7 updates Jun 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-613e7f4689 branch from c35f2b0 to 02ff79a Compare June 15, 2026 23:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants